Lucene search
+L

39 matches found

CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•9 views

WordPress plugin Arconix FAQ 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7AI score0.00288EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•11 views

PT-2025-17103 · Unknown · Arconix Faq

Name of the Vulnerable Software and Affected Versions: Arconix FAQ versions 1.9.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

7.1CVSS7.3AI score0.00288EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•4 views

CVE-2025-32531: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tychesoftwares Arconix FAQ arconix-faq allows Reflected XSS.This issue affects Arconix FAQ: from n/a through = 1.9.5...

7.1CVSS5.8AI score0.00288EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/01 3:15 p.m.•21 views

CVE-2024-38783

Missing Authorization vulnerability in Tyche Softwares Arconix FAQ allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Arconix FAQ: from n/a through 1.9.4...

5.3CVSS0.00381EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/01 3:15 p.m.•15 views

CVE-2024-38783

Missing Authorization vulnerability in Tyche Softwares Arconix FAQ allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Arconix FAQ: from n/a through 1.9.4...

5.3CVSS5.8AI score0.00381EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/01 2:17 p.m.•26 views

CVE-2024-38783 WordPress Arconix FAQ plugin <= 1.9.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Tyche Softwares Arconix FAQ allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Arconix FAQ: from n/a through 1.9.4...

5.3CVSS0.00381EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/01 2:17 p.m.•18 views

CVE-2024-38783 WordPress Arconix FAQ plugin <= 1.9.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Tyche Softwares Arconix FAQ allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Arconix FAQ: from n/a through 1.9.4...

5.3CVSS5.4AI score0.00381EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/01 2:17 p.m.•62 views

CVE-2024-38783

CVE-2024-38783 concerns the WordPress plugin Arconix FAQ (

5.3CVSS5.3AI score0.00381EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/01 12:00 a.m.•4 views

CVE-2024-38783: Missing Authorization

Missing Authorization vulnerability in Tyche Softwares Arconix FAQ allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Arconix FAQ: from n/a through 1.9.4...

5.3CVSS5.8AI score0.00381EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/01 12:00 a.m.•16 views

PT-2024-28216 · Unknown · Arconix Faq

Name of the Vulnerable Software and Affected Versions: Arconix FAQ versions 1.9.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For Arconix FAQ versions 1.9.4 and...

5.3CVSS6.5AI score0.00381EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/11/01 12:00 a.m.•17 views

WordPress plugin Arconix FAQ 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.6AI score0.00381EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/07/19 12:57 p.m.•15 views

WordPress Arconix FAQ plugin <= 1.9.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Arconix FAQ versions = 1.9.4...

5.3CVSS7AI score0.00381EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/07/19 12:00 a.m.•21 views

WordPress Arconix FAQ Plugin <= 1.9.4 is vulnerable to Broken Access Control

Software Arconix FAQ Type Plugin Vulnerable versions = 1.9.4 Fixed in 1.9.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-38783 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 13aa9ad89552 Credits Dhabaleshwar Das Required privile...

5.3CVSS6.7AI score0.00381EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/05/08 1:19 p.m.•70 views

CVE-2024-4233 Broken Access Control vulnerability in multiple WordPress plugins by Tyche Softwares

Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce, Tyche Softwares Arconix Shortcodes, Tyche Softwares Arconix FAQ.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through 4.8.1; Arconix Shortcodes: from n/a through...

4.3CVSS5AI score0.00343EPSS
SaveExploits0References3
CVE
CVE
•added 2024/05/08 1:19 p.m.•78 views

CVE-2024-4233

CVE-2024-4233 is a Missing Authorization vulnerability affecting Tyche Softwares plugins: Print Invoice & Delivery Notes for WooCommerce (up to v4.8.1), Arconix Shortcodes (up to v2.1.10), and Arconix FAQ (up to v1.9.3). Connected PT security details specify the issue can be exploited remotely. R...

4.3CVSS5.1AI score0.00343EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/08 12:00 a.m.•2 views

CVE-2024-4233: Missing Authorization

Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce, Tyche Softwares Arconix Shortcodes, Tyche Softwares Arconix FAQ.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through 4.8.1; Arconix Shortcodes: from n/a through...

4.3CVSS5.8AI score0.00343EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/08 12:00 a.m.•16 views

WordPress plugin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

4.3CVSS6.5AI score0.00343EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2024/04/26 10:20 a.m.•22 views

WordPress Arconix FAQ plugin <= 1.9.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Arconix FAQ versions = 1.9.3...

4.3CVSS7AI score0.00343EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/04/26 12:00 a.m.•21 views

WordPress Arconix FAQ Plugin <= 1.9.3 is vulnerable to Broken Access Control

Software Arconix FAQ Type Plugin Vulnerable versions = 1.9.3 Fixed in 1.9.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-4233 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 08be721736b8 Credits Dhabaleshwar Das Required privileg...

4.3CVSS4.4AI score0.00343EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder